Version 5.2.0 - 2026/04/09

Breaking change: Updated dependency requirements by raising the minimum supported PHP version from 8.1 to 8.2 and bumping auth0/auth0-php to its secure release.

This change is required to address security issues fixed upstream (see Security) and may affect projects running on PHP < 8.2.

Breaking Changes

Raised the minimum required PHP version from 8.1 to 8.2. This is required by updated dependency versions that include important security fixes.

Security

Updated auth0/auth0-php to a secure version addressing this vulnerability:
- GHSA-w3wc-44p4-m4j7 — Auth0 PHP SDK has Insufficient Entropy in Cookie Encryption https://github.com/advisories/GHSA-w3wc-44p4-m4j7

Download

Download this version from the TYPO3 extension repository or from GitHub.

All Changes

This is a list of all changes in this release:

2026-04-09 [BREAKING] Fix CVE-2026-34236: bump auth0/auth0-php to 8.19.0 [TER-427] (Commit 244e411 by Oliver Heins)